PeachClipboard.kt

1package com.peachpasswords.shared23import android.content.ClipData4import android.content.ClipDescription5import android.content.ClipboardManager6import android.content.Context7import android.os.Build8import android.os.PersistableBundle9import android.widget.Toast10import kotlinx.coroutines.CoroutineScope11import kotlinx.coroutines.Dispatchers12import kotlinx.coroutines.Job13import kotlinx.coroutines.SupervisorJob14import kotlinx.coroutines.delay15import kotlinx.coroutines.launch1617/**18 * Centralised clipboard writes for sensitive values (MF-8). Every copy:19 *  - flags the clip IS_SENSITIVE on API 33+ so the value is kept out of the20 *    clipboard preview overlay and clipboard history,21 *  - auto-clears [CLEAR_DELAY_MS] later, but only if our value is still on the22 *    clipboard — it never stomps something the user copied afterwards,23 *  - shows a brief "Copied — clears in 30s" hint, matching the browser.24 *25 * The wipe runs on a process-lifetime scope, NOT the caller's, so navigating away26 * from the screen that triggered the copy cannot cancel it.27 */28object PeachClipboard {29    const val CLEAR_DELAY_MS = 30_000L3031    private val scope = CoroutineScope(Dispatchers.Main.immediate + SupervisorJob())32    private var pending: Job? = null3334    fun copy(context: Context, label: String, value: String, hint: Boolean = true) {35        if (value.isEmpty()) return36        val cm = context.getSystemService(Context.CLIPBOARD_SERVICE) as ClipboardManager37        cm.setPrimaryClip(sensitiveClip(label, value))38        if (hint) Toast.makeText(context, "Copied — clears in 30s", Toast.LENGTH_SHORT).show()39        pending?.cancel()40        pending = scheduleClear(41            scope = scope,42            expected = value,43            readCurrent = { cm.primaryClip?.getItemAt(0)?.text?.toString() },44            clear = { cm.setPrimaryClip(ClipData.newPlainText("", "")) },45        )46    }4748    private fun sensitiveClip(label: String, value: String): ClipData =49        ClipData.newPlainText(label, value).apply {50            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) {51                description.extras = PersistableBundle().apply {52                    putBoolean(ClipDescription.EXTRA_IS_SENSITIVE, true)53                }54            }55        }5657    /**58     * Schedule a clipboard wipe after [delayMs] that fires only if [readCurrent]59     * still returns [expected]. Extracted as a pure seam so the timing can be60     * verified on a virtual scheduler without Android.61     */62    internal fun scheduleClear(63        scope: CoroutineScope,64        expected: String,65        readCurrent: () -> String?,66        clear: () -> Unit,67        delayMs: Long = CLEAR_DELAY_MS,68    ): Job = scope.launch {69        delay(delayMs)70        if (readCurrent() == expected) clear()71    }72}